From 35636272c0164372954b52a8a957ba08d645330d Mon Sep 17 00:00:00 2001
From: multiple creatures <dev@multiple-creature.party>
Date: Mon, 26 Aug 2019 11:39:40 -0500
Subject: detect spam registrations + include account approvals/rejections in
 transparancy log

---
 app/workers/registration_janitor_worker.rb | 32 ++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 app/workers/registration_janitor_worker.rb

(limited to 'app/workers')

diff --git a/app/workers/registration_janitor_worker.rb b/app/workers/registration_janitor_worker.rb
new file mode 100644
index 000000000..e3130a6bb
--- /dev/null
+++ b/app/workers/registration_janitor_worker.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+class RegistrationJanitorWorker
+  include Sidekiq::Worker
+  include LogHelper
+
+  def perform(user_id)
+    user = User.find(user_id)
+    janitor = janitor_account || Account.representative
+
+    spam_triggers = ENV.fetch('REGISTRATION_SPAM_TRIGGERS', '').split('|').map { |phrase| phrase.strip }
+
+    intro = user.invite_request&.text
+    # normalize it
+    intro = intro.gsub(/[\u200b-\u200d\ufeff\u200e\u200f]/, '').strip.downcase unless intro.nil?
+
+    return user.notify_staff_about_pending_account! unless intro.blank? || intro.split.count < 5 || spam_triggers.any? { |phrase| phrase.in?(intro) }
+
+    user_friendly_action_log(janitor, :reject_registration, user.account.username, "Registration was spam filtered.")
+    Form::AccountBatch.new(current_account: janitor, account_ids: user.account.id, action: 'reject').save
+  rescue ActiveRecord::RecordNotFound, ActiveRecord::RecordInvalid
+    true
+  end
+
+  private
+
+  def janitor_account
+    account_id = ENV.fetch('JANITOR_USER', '').to_i
+    return if account_id == 0
+    Account.find_by(id: account_id)
+  end
+end
-- 
cgit